Even so he should have never been able to do what he did. All he should have found were very securely locked doors, alarmbells going off all over the place and a very stern talking to.
We're not talking about the website of the local football club here, it's the military.
If a foreign nation with a large budget and a concerted effort would be able to crack it that would be embarrassing but at least you could have some understanding. Now the assumption is that if this clown could do it then probably every two bit intelligence agency in the world has been doing it as well. In other words there is lots of egg to go around for various faces.
Instead of turning this guy into an asset they are trying to make him in to a scapegoat. What he did wasn't good but he could only do it because somebody else left cracks that shouldn't even have been there in the first place.
As it is they ought to be very much ashamed.
Of course there will be people that will say 'but he had no business doing that' or 'he should have known better'.
Maybe.
The 'rattling a locked door of my house' analogy has been made plenty of times, I think the military should be held to a much higher standard and that they basically ought to put out a bounty for every hole that somebody proves exists.
That way the script kiddies/blackhats get to make a decent living and we all end up more secure.